package/pkcs11-helper: new package

pkcs11-helper is a library that simplifies the interaction with
PKCS#11 providers for end-user applications. Pkcs11-helper allows
using multiple PKCS#11 providers at the same time, enumerating
available token certificates, or selecting a certificate directly by
serialized id, handling card removal and card insert events, handling
card re-insert to a different slot, supporting session expiration and
much more all using a simple API.

Signed-off-by: Adam Duskett <Aduskett@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Adam Duskett 2019-10-29 17:56:03 -07:00 committed by Thomas Petazzoni
parent 71a46eb572
commit dee4fbdf5a
5 changed files with 76 additions and 0 deletions

View File

@ -54,6 +54,7 @@ F: package/nginx-naxsi/
F: package/openjdk/
F: package/openjdk-bin/
F: package/php/
F: package/pkcs11-helper/
F: package/policycoreutils/
F: package/prelink-cross/
F: package/polkit/

View File

@ -1324,6 +1324,7 @@ menu "Crypto"
source "package/mbedtls/Config.in"
source "package/nettle/Config.in"
source "package/openssl/Config.in"
source "package/pkcs11-helper/Config.in"
source "package/rhash/Config.in"
source "package/tinydtls/Config.in"
source "package/tpm2-tss/Config.in"

View File

@ -0,0 +1,19 @@
config BR2_PACKAGE_PKCS11_HELPER
bool "pkcs11-helper"
help
pkcs11-helper is a library that simplifies the interaction
with PKCS#11 providers for end-user applications.
pkcs11-helper allows using multiple PKCS#11 providers at the
same time, enumerating available token certificates, or
selecting a certificate directly by serialized id, handling
card removal and card insert events, handling card re-insert
to a different slot, supporting session expiration and much
more all using a simple API.
pkcs11-helper is not designed to manage card content, since
object attributes are usually vendor specific, and 99% of
application need to access existing objects in order to
perform signature and decryption.
https://github.com/OpenSC/pkcs11-helper

View File

@ -0,0 +1,5 @@
# Locally computed
sha256 fbcec9dd15a71d6ef22b09f63934c66d7d0292fefbaf3a60703ee4a9a73bf6a5 pkcs11-helper-1.25.1.tar.gz
sha256 808705ac1daafe07a76431929575c5712a8693977a39ec9102aed25f030754d9 COPYING
sha256 865496cf23a6c792739ff2f9ea11e95ac99db89cfe3780a295b4e1495a9c19fe COPYING.BSD
sha256 cd2e7d63a11058f19c58b06fb8c759140ce70788369dce6e6e9db40d3475021e COPYING.GPL

View File

@ -0,0 +1,50 @@
################################################################################
#
# pkcs11-helper
#
################################################################################
PKCS11_HELPER_VERSION = 1.25.1
PKCS11_HELPER_SITE = $(call github,OpenSC,pkcs11-helper,pkcs11-helper-$(PKCS11_HELPER_VERSION))
PKCS11_HELPER_LICENSE = GPL-2.0 or BSD-3-Clause
PKCS11_HELPER_LICENSE_FILES = COPYING COPYING.BSD COPYING.GPL
PKCS11_HELPER_AUTORECONF = YES
PKCS11_HELPER_INSTALL_STAGING = YES
PKCS11_HELPER_CONF_OPTS = \
--disable-crypto-engine-polarssl \
--disable-crypto-engine-cryptoapi
ifeq ($(BR2_PACKAGE_GNUTLS),y)
PKCS11_HELPER_DEPENDENCIES += gnutls
PKCS11_HELPER_CONF_OPTS += --enable-crypto-engine-gnutls
else
PKCS11_HELPER_CONF_OPTS += --disable-crypto-engine-gnutls
endif
ifeq ($(BR2_PACKAGE_LIBNSS),y)
PKCS11_HELPER_DEPENDENCIES += libnss
PKCS11_HELPER_CONF_OPTS += --enable-crypto-engine-nss
else
PKCS11_HELPER_CONF_OPTS += --disable-crypto-engine-nss
endif
ifeq ($(BR2_PACKAGE_MBEDTLS),y)
PKCS11_HELPER_DEPENDENCIES += mbedtls
PKCS11_HELPER_CONF_OPTS += --enable-crypto-engine-mbedtls
else
PKCS11_HELPER_CONF_OPTS += --disable-crypto-engine-mbedtls
endif
ifeq ($(BR2_PACKAGE_OPENSSL),y)
PKCS11_HELPER_DEPENDENCIES += openssl
PKCS11_HELPER_CONF_OPTS += \
--enable-openssl \
--enable-crypto-engine-openssl
else
PKCS11_HELPER_CONF_OPTS += \
--disable-openssl \
--disable-crypto-engine-openssl
endif
$(eval $(autotools-package))